Privacy Policy
Draft · last updated 2026
XCii (“we”) helps you discover and book local services in South Africa. This policy explains what personal information we collect and how we use it, in line with the Protection of Personal Information Act (POPIA). This is a draft for review.
Information we collect
When you create an account or make a booking, we collect your name, email address and phone number, and details of the bookings you make. Businesses on XCii provide their own details, services and staff. We collect basic usage and device information to run and improve the app.
How we use it
We use your information to create and manage your bookings, connect you with businesses, send booking confirmations and reminders, process deposits where applicable, and keep the service secure. Businesses see the booking details necessary to serve you.
Sharing
We share booking details with the business you book with. Payments are processed by Paystack; we do not store card details. We do not sell your personal information.
Your rights
Under POPIA you may request access to, correction of, or deletion of your personal information, and object to certain processing. You can download everything we hold about you or delete your account at any time from your account settings. Deleting your account removes your profile and personal details; businesses retain de-identified records of past appointments where the law requires.
Retention & security
We keep your information for as long as your account is active or as needed to provide the service and meet legal obligations, and we take reasonable measures to protect it.
Contact
Questions about this policy or your data? Email privacy@xcii.co.za.